hi Guys, i according to publicly available information, the vulnerability is related to the Alarm Script Execution functionality. If this feature is enabled, an attacker may be able to exploit it to achieve remote code execution (RCE) on the server hosting Veeam Service Provider Console (VSPC).
fixed: https://www.veeam.com/kb4788
Affected Versions
The following versions are affected:
- All VSPC versions prior to 9.2.1.33875
- All 9.0, 9.1, and earlier builds
- Version 9.2.0.33215 may be vulnerable only if alarm script execution has been explicitly enabled.
Remember step upgrade:
9.0.0.29860
↓
9.1.0.30713 https://www.veeam.com/products/downloads/latest-version.html?tab=previous
↓
9.2.1.33875
